70bcf752dc
Use futimens() instead of utime() to change the timestamps on a backup file. Otherwise, a non-privileged user could create an arbitrary symlink with the name of the backup file and in this way fool a privileged user to call utime() on the attacker-chosen file. Import the relevant gnulib module to make sure futimens() is available.
49 строки
776 B
Bash
Исполняемый файл
49 строки
776 B
Bash
Исполняемый файл
#!/bin/sh
|
|
# Generate configure & friends for GIT users.
|
|
|
|
gnulib_url="git://git.sv.gnu.org/gnulib.git"
|
|
gnulib_hash="4084b3a1094372b960ce4a97634e08f4538c8bdd"
|
|
|
|
modules="
|
|
futimens
|
|
getdelim
|
|
getline
|
|
getopt-gnu
|
|
glob
|
|
isblank
|
|
iswblank
|
|
lstat
|
|
nl_langinfo
|
|
regex
|
|
sigaction
|
|
snprintf-posix
|
|
stdarg
|
|
strcase
|
|
strcasestr-simple
|
|
strnlen
|
|
sys_wait
|
|
vsnprintf-posix
|
|
wchar
|
|
wctype-h
|
|
wcwidth
|
|
"
|
|
|
|
# Make sure the local gnulib git repo is up-to-date.
|
|
if [ ! -d "gnulib" ]; then
|
|
git clone --depth=123 ${gnulib_url}
|
|
fi
|
|
cd gnulib >/dev/null || exit 1
|
|
curr_hash=$(git log -1 --format=%H)
|
|
if [ "${gnulib_hash}" != "${curr_hash}" ]; then
|
|
git pull
|
|
git checkout -f ${gnulib_hash}
|
|
fi
|
|
cd .. >/dev/null || exit 1
|
|
|
|
rm -rf lib
|
|
./gnulib/gnulib-tool \
|
|
--import \
|
|
${modules}
|
|
|
|
autoreconf -f -i -s
|